https://github.com/HULKs/meta-nao/blob/a41dfa5f79687e7685eda1f04671ab84fb9709e3/meta-hulks/recipes-hulks/hulk/hulk/hulk.service#L10 specifies to allow executable stack, as openvino requires that. In a recent patch: https://github.com/intel/meta-openvino/commit/e463d7827625c44d8d1ffef6bee9815441ff1a13 this should be fixed. We might be able to upgrade and removed the `GLIBC_TUNABLES`